My AI coding agent tried to touch files it should never touch. So I built a local guardrail.